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Introduction and Motjvation 

A practitioniif s un.ler^t miim') 0! the Java piatform Odonot be considejed 
cotTipletft w/ithoti! a soiici understanaing ot the life cycle ot 3 Java reference fvpe 
iciass or mtpititcp) ihe j'fimaiv (.Tocesses invoivecl in tht& life cycie include 
loading, hnk")g, nhSizatior and untoad-ng Th!6 papet discusses, one of the&e 
processes, namely the loading process, in some detail. 
Class loading ts ^^ndamenta) to two of the most compelttns features of Java; 
d/namic Itrhng and dyrarvc sxfersion 



Dynaniic imkim allows types to be (iicrenientaliy int«rpo!atsd irito a runiiing 
extension allows the deasion as to which types are loaded into a JVM to be deferfed 
until runtime 1 his mean's that an application hosted by the JV1VI can leverage hpes thai were 
previously unknown or perhaps did not even exist when the applicatfon was complied Dynamic 
linking and e-<tenaon support the notion of tumnTK ssssmbiy opcode, a notion of crtttcal importance to 
r-sroe containers {e.g. application sen^'ers;, 

A Note on Terminology 

Tnfe ttrtnit lo^amg' and 'cisss loading in this article refer to the loadiftg of reference types (clas&es 
intfirfaojs. and arrays) Where "cfass" or "fjpe" is used, ail referehce types are usuaify implied, 
fcxpiicit ianpuafie will be used when this is not the case. 
Type Life Cycie 

Tvpfs aip made available to a running program by the Java Virtuar' 0 - - 
J'. uf loading linking .and initialization Loading fs the process. ■■ \ , 

reprfe^entftun )f c tv'f.e and hnngiry ft into the JVM Linking tsthe p r„cb=,r> ^k". c - 

oipoic'tina It intu tns luntiiin- state of the JVM so that ft can rvccutrd tmitaiiration is thf 
loebi of cHoutiiiy tliK iiHtidlcKfs Ota type (static initializeis for clavbtss i>tatic field inifialciJis fur 
ssfis and interfaces}. Wnen 3 type becomes unreachable (i.e. the afnning apptfcation has no 

reterences to the type;, it becon:ies eligible for garbage collection This collection is called type 

unloading. 

Loading a type, from a more detailed perspective, consists of three pnmary activities: 

Gi en T ttpsb fiillt qtniified n^rn-^ piodiiv,e 3 stream of binary data that represents that type 
Pdrvithp stream ut binary data pio-iutt-d m stop #1 into internal structures m the method area 
of the JW The method art- j is a k>gical area of memory in the VM that is used to stoie 
information about loaded types. 

Create an instance of class - . that represents the type indicated m step #1 

Further details about linMng, inihateation, and unloading are beyond the scope of this article 
d readers are refened to the JVM Specification for more information. 




Most Popular Stories 

TO*»y !! ' u - » 

s using JOBC with MySQL. Getting started 
::. Creating Use Case Diagrams 
. s Parsing HTML in Microsoft OS 
An Introduclion to Java Anttotatioiis 



When is a Type Loaded? 

Tni6 ts a surpii&ingiy tncky' question to answer. Thts is due in Sarge part to the significant flexibility 
afforded, by the JVM spec, to JVM (mpiementBtions. 
Loading must be performect before linking anct linking must be 
pefformect before inittaitzation. The VM spec does stipulate the timing | 
of iiitttalization. ft strictly requires that a type be initialized on Its first 
active use (see Appendix A for 3 list of wtiat constitutes an "active 

"). This mfisns that loading (snd linking) nf a type MU^STb«^ 
perfofined at or before thai type's first active use. 



Manipulate XML Fife Data U-Mg Cft 



fipieniefitations typic^liv ^lay ttK iostiin.cj of a Eyp«? as loncj as : s* 

.osiblts Thfiy could ptitentislly. hiwever, load class«:S ri;uoh esrliei. 

i<tsfs loadere (ses bp.iov:) can opt to to.-sci a type early in anticipation 
of eventual u^e If this strategy is chosen, the class loader must not report any problem (by throwing 
a subclass of , > ■ . ) encountered during loading until tfie type's first active 

use. !n other words, a type must appear to be foaded only when needed. 

Class Loaders 

Classes are tosdfid so that their bytecodes csn be processed by the execution engine of the JV^ All 

jn-anay (5*e Appendix B) reference types, including Masses, are (oaded either through the 
bootstrap class load&r • sometimes referred to as the primordiat dass loader - or through a user- 
delftt&d dass loader • sometimes refen-ed to as a custom class loader. The bootstrap class loader is 

1 integral part of the JVM and is responsible for loading trusted classes (e.g. basic Java dass (ibrary 
classes). User-defined class loaders uniit<e ttie bootstrap class loader, are not intrinsic components of 
the JV!\fl They are subdassei, of tfie , . , class thai are compiled and 

instantiated just like any othei Java class. 

Different user-defined class loaders can be spgcialized lo provide different loading policies. For 

<amp!e, a class loader might cache binary repmsentattons of classes and interfaces, prefetch them 
tjased on expected usage, ot load a group of related classes together (as metitioned before, hovsrever, 
rf class loader must rsBect loading errors only at points in the program vs^here they could have arisen 
without piiefetching or group foading). 

Class loaders, in addition to loading classes, can also be used to load other types of resources (e.g. 
tocaiizafton resource bundies) from the repositories that they manage. Further treatment of this 
capability is outside of the scope of this article. 
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Cracking Java byte-code encryption 

Why Java obfiiscation schemes based on byte-code encrj'ption woa't work 

By \aadimjr Roubtsov, Java World com, 05/09/03 
May 9, 2003 

If I encrypt ««y class files and use a custom c1»$$ioader to load and decrypt theni on the fly, wiU 
this {HH'venl decompihitioii? 

^i^* The probSem of pre\enting Java byte-code decompilation is alinojit as old the language itself. Despite a 

range of obfuscatioti tools a vatlable on the market, novice Java proJ^ammers continue to think of iievv' and 
clever ways to protect their inteilectual propeitj'. In this Java Q&A iiistaUment, 1 dispel some mj'ths around an 
idea fiequently rehashed in discussion tbrunis. 

The extreme ease with which Java . class files can be reconstructed into Java sources that closely resemble 
the originals has a lot to do \Mth Java hvte-code de^iun iioals and liade-offs Among other things.. Jas a byte 
code was designed foe compactness., jilairr.rni :;ulL-ju-!idf!-;ce, Detwosi mobilitv, and ease of analysis by 
byte-code interpreters and JI T (just-m-time} llotSpot d>namic compiieis. Arguabh, the compiled .ci.5.i5 files 
express the prograimncrs intent so cieariy they could be easier to analyze than the original suuvcc code. 

Several things can be done, if not to prevent decompilation completely, at least to make it more difficult. For 
example, as a post-compiktion step you couid massage the , class data to make the b>te code either harder to 
read when decompiled or harder to decompile into valid Java code (or both). Techniques like performing 
extreme method name oserioading work well for the fornien and manipulating control flow to create control 
structures noi possible to tepieseni {hrt>ui/ii .las a s> max work well for the latter. Tlie more successful 
commercial obfuscatoi s use a mix of these and other techniques. 

l.?n fortunately, both approaches must actually change the code the JV.V1 will run, and many users are afraid 
(rightfully so) that this transformation may add new bugs to their applications. Furthermore, method and field 
renaming can cause reflection calls to stop working. Changing actual class and package names can break 
several other Java APIs (JNDI (Java Naming and Directory Interface), IIRJ.. providers, etc.). In addition to 
altered names, if tlie association between class byte-code offsets and source line numbers is altered, recovering 
the original exception stack traces could become difficult. 

Then there is the option of obfuscating the original Java source code. But fundamentaUy this causes a similar 
set of problems. 
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Eiicn'pt, not obfusaite? 

Puthaps du above lu.T madt \ou ihiuk, "Well, what jf liTBtcadol inantpukumg byte code ! tncnps all 
classes after compjlation and dccr>'pt them on the fly mside the J\'M (whjch can be done xMth a custom 
classloader)? 'Then the JVM executes my ongtnal byte code and yet there is nothing to decompile or reverse 
engineer, right ?" 

Unfbr{unatei> you vvouid be vsTong, both in thinking that you were the first to come up wkh this idea and in 
thinkiTig that it actuaily works And the reason has nothing to do with the strength of your encrv'ption scheme. 

A simple class encoder 

To illustrate this idea. T implemented a sample application and a very trivial custom classloader to nm it. Tlie 
appiscauon cotis)-,}-, of two short classes: 

t>ub. u ^ «^ J -1 ■■ 

r^xiT'' c &'«*ir main t final String [] args) 

A. { -pr. >l in {"secret re.«:u.lt = " + KySiac.t:etC.lisss .i(iySiac.t:etAigo3:ith;!S {)); 



XHtport ■■} ava , u.!:. i i . Random; 

* GuesiS what, the secret algorithm just uses a randoKi miiober generator. . . 

:»./ 

public static int j-aySecretAlgcritlHJi 0 
{ 

retiim (int) s random. nextint (); 

private static final Random s_rasidosn ~ new Rasidosn fSystsia. currentTinisMillis !)); 
} // End of: class 



My aspiration is to hide the impiementation of my . .secret . cocte.MySecretciass by encrypting the reievant 
, clans files and decr>'pting them on the tly at runtime. To that effect, I use the following tool (some details 
omitted; you can download the full source from Resources ): 

public class Sncrj'ptedCiassLoad«r extends tJRLCiassLoader 

public static void m^ain. (final String [] args) 
throws Ejjception 

{ 

in ? "-rusi".«aual« iarqs iO\) && ( arq.-si . .s.ersqtxs >- 35) 

// Creates a custom loader that will use the current loaaer as 

// aei«gatJ,oxj parer^t; 

txnal ciassJjoaaer as>]3Loaaer - 
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final }^sthocJ appm«iij -~ app, g«tMethcd ("{■!»:■.«", issw Class [ 
fiual Sticirig fl a.ppargs ~ liew Strxng [args . lerigth - 5i; 
Systeiu. arraycopy <args, 3, appargs, 0, appargs, iength} ; 

appraairi.invot'.e {null, nev/ Object fj {apparqa}); 

else if r'-'t:ncrypt" .equals {args [0}) {args. length >= 3)) 

... eiscsiypt sDecified classes 

) 

else 

throw new IllegalArgtiraeatEsception {USAGE) ; 



Overrides java-Isng-CiassLoader, ioadClass O to changa the usual parent- child 
delegation rules just enough to b« able to "snatch" espplication ci<3sses 
from under system ciassioader's nose. 

/ 

bli-:; Cl;i,r,r lo;:dcl3.E..E. str.i.ng naiTxe, f boolean rei^olve) 

if {TRACE) System. out. printisi {"loadClass {" + nai^ie i- ", " resolve ^- "}"), 
Class c = nuil; 

// First, ch«cl< if this class has already been defined by this classloader 
// instance: 

c findLoadsdClass fnams} ; 



h q i } o c ■} c 

// rsarent xoacer and note wnetner tae »arenv. aex«<jateG or not; 

/its jcs'ii.j: < ore 

/jxtro I 'i cj Itro class name: 

parsntsVersion qeti'arenr. u.xoaaclass tnarasj ; 

t 3. s=-tc *jI< < r O Q^f^ rs^ t 



fc — null) 

try 
{ 

// OK, either 'c' was loaded by the system (xjot the bootstrap 
// or isxtensioti) loader (in xvhich case I xvasit to igisore that 
// definition} or the parent failed altogether; either way I 
/■/ atterapt to define my own version: 
c - fxndCI«ss {nai-Kj; 

} 

catch ^ClassK'OtFcundException ignore} 
{ 

// li: that failed, fall back on the parent's version 
// [whxch could be null at this point] : 
c - parentsVersioii; 
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throw new ClassKotFoundEKceps^iosa (naine) ; 

if {resolve} 

resolv«Class (c5 ; 

I 

* Overrides java.new.URLClassLoader.defineClass {} to b« able to call 

* crypt n beScra definina a class. 
*/ 

protected Class findClass {final string narae) 
t hrows Cias sNot FoundE xcer> t i osi 

{ 

if {TRA.CE) Systetr.. out, print! SI ("f indClesss <" + nam.e + "}"); 

/,/ .class tiles are not guaranteed to be ioadafole as resources; 
// but if Sun's code does it, so perhaps can rnirse,,. 
final String classResource - name. replace '/'} + ".class"; 

final URL classURL getResourcs (classResource) ; 

in (ciasslTRL -~ null) 

throve new ClassNotFoundException (name) ; 

eis« 

XnputStreaits in - null; 

trv 

{ 

.!.n - cla.'Si.'SiURL.openKcrean! {); 

fiy^"-" b-< tf '-1-'«'«'R-< t«»o - readFully (in); 

t. ] 1 

_r Kf^c 2, cf^- Q^ - t% ^ptin i "decryptsrd {*" -i- name -f "J"); 

returrs defineCIass (nanie, cIa.-jsBytes, 0, classBytes . length) ; 

catch {XOException ios) 
{ 

throw Slew ClassNotFoiindSxceptioa Oiasnsa); 

finally 

if ;irs !"■ null) t:t:y { in..clo.«:e {); j catch iExc«ption ignore) {} 



/** 

* This classloader is only capable of custom loading from a single directory. 
*/ 

private EncryptedClassLoader {final ClassLoader parent, final File classpath) 
thr ows Ha 1 f o rmedURLEjicept i on 

( 

super (new IfRL [j {clas.-3path. tcURL ()), parent); 

if {parent — rLull) 

throw n«w IllegalArgusnentEKoepti on {"SncsryptedClassLoader" + 
" requires a non-null delegation parent"); 



* De /encrypts binary data in a given byte array. Calling the method again 
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* re%'erses th« encryption, 
*/ 

private s-^atic void C!:y|>t (finai hytn t] data) 
{ 

for i,iRt 1 ^ 8; i < ciar.a . length; -f-* i) data [ij Gx5A; 
. , - Kiora heJ.peK rfiethods . , , 
// End ot class 



Encrypt ^•<,o;...:««;.,g3 i-\ t ha-i two basic Operations, encryptinga given set of classes m a j^isen chsspath 
directory and tunnniga presiousiy encf>'pted application 'llie encn ption }•> \ef> straiiihtforward it consists of 
basically flipping some bjls of eveiy hyie in the binary class coiuents. (Yes, ibe good o!d XOR (exciusue OK) 
IS a lmost no encryption at all, but bear with me. This is just an illustfation.) 

Ciassioadmg by K:i -i vs J.odji 3....: -^x-'x ■ deservesa little more attentson My implenientatjon subclasses 
;j 3 .n- c . i-!-^: ; j;^. : ^ v s r a tid ov orridcs botli ^-...idcijK's.':, {) and cir •'] ...-.--..s . to accompbsli two goals 
One IS 10 bend the usual Java 2 classloader delegation rules and get a chance to load an encrs pted class before 
the system classloader does it, and another is to invoke cr-yp^::. { ) immediately before the call to <ief i .n..=;c.i.asis ( 1 
that otherwise happens inside URLCiassLoadsr . f indciass } . 

After compihniY evervOung into the bin directory : 

>javac ~d bin src/"* . ^ava src/rc.y/, secret/ code.-'' * . 3 ^'i'^''" 



I ''encrypt" both K;5:i:i and KySe=cre!:Cia3s classes: 

>java -cp bin EncrvpcedCla.'sxLoader -encrypt bin Main my . secret .code .MySecretCla.s.s 
sncryptad [ iY,y\ s^icr^tXcodexHySecr-itCiass . classj 



These two classes in hir; have now been replaced with encrypted versions, and to run the original application, I 
must run the application through Eti':;rypt«dCIassLoader: 




at java .lang. ClassLoader -def xneClass (CiassLoader . ^ava : 502) 

at lava . net . liRLuiassitoader .aef xnsCxass (uRLCiassijoader . lavat 2o0) 
at i ava . r:et.URLClassLoader . accessOO (URLCl ass Loader , java; S4} 

at j ava . iang . CiassLoader . loadCla'ss (Cla.ssLoader . 1 ava : 25-5) 

at. 3 ava . iang . CiassLoader . ioadCiassInt«rnal (Ciassl-oader . java : .31-5) 

>:i«Vo -cp bxn EncryptedClassLoader -run tain Maiti 

deer ypted [t-ia i n] 

decrypt ed [ir.y . .secret , code . MySe-cret Class ) 
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Sure enough, running any decompiler (such as lad) on encrypted classes does not work. 

1 im« to vjJd a buphcjticatt J pasj\soio protL^- . >. it ix^ ^ sap t\m into a imfive executable, and charge 
hundtods of dohars for a "si^ftxsaie piotection solution," ijgb{ Of couisc not 

OassLoader.(!efine(lass(): The inevitable intercept point 

; / ha\c to del)\ er tliuij cUss definitions lo the IVM \ ki one \vell-dt.j mud \PI ptunt du 

- 1 1 M ' ■> i" -k L .-tin- method Ihef Irs s^oAdv-i APi has ^eveial overloads of th5S 

method hut al! oi tbeai calhnto the at- sr .l^i.. . ,-=5t £ rq, oy-ej -rr, iht:, P.-otectionnorrran^ 
method it is <i .1 method that calls into JVM natsve code after doing a few checks It is important to 
undeistand that no (;kni>l(mcler am avoid culling this tmihoil if it wants to crmh' a class, 

Tlic c . d " / method i.s the only place where the magic of ctcntitig diKr^.^^ object out of a tlat bvte 
an-.n can take place 'Vnd guess \shat {he h\te arra\ -nust ct^ntam the unenci\ pted class definition m a 
\se dv\ U!c ilod 5UU < see the class t o T.it s.-^ui. tii.<itio'^) i^ioakinsi, ihi, hids pUnn st^hcme is now a 
simpK; iiKUtor of fntctoeptiOi' <iU calls J s ivo*' od .5<\-i de(.o ij^shr" all sn^0Ic^t^i^^> tlasici to \oui hcaif's 
dcMfC (1 niLniion anofhci optio.^ !\ \! P eliU Int^jta^e iJ\ MP! ) 1 ttt ) 

Doing this interception !S not liard at ail In fact, bicakmg my own piotectsoii scheme takes less time that it took 
to implement it! First, 1 get the source for lava . iang.ciassLoader for my Java 2 Platform, Standard 
Developmem Kit (J2SDK) and modify defineciass (string, byte 1 1 , int, mt, ProtectlonDOKiair.) to 
Imve some additional class logging: 



/ J 1 r << 1 "i v< I ^ >■ r 1 i ^< children: 

^ >- > diA"-^ ^Gca^io- IT' ^ <i pathname] : 

Fs.j.e durap ™ new File (parentDir, 

siaisievreplaoe t'.', F.!..3.e.separato.t:cnar) -t- "f" 
qetulass {} .aetWasue () + ■»- 

Lorsg. toHeKSt.rxng (System. identxtyHashCode {T;nis) i +• class"); 
du!!^j . cjetParentFile ( ) -uikdirs { ) ; 
FileOutputStreaia out ~ null; 



out - new FileOvstputStrsaia {diisup) ; 
out. write {b, oSf, len) ; 

catch (lOException ioe) 

io«, prints tackTrace (System. out) ; 



if. ioiit !--: null) try { out, close {); ] catch. (Excaptior: igEioxs) 
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T^-otethat the added Imo^ ate L,u^ukd bs -.latcnient Ilut filters foj classes loadni In tbu ss'.teni 
i cla-=:«rjit. ) and its dcs».ot M t -so ei- \ so 1 o ^-^ ^ ^ o^n. n- mK * i , does tiot fail. 

Fmallv, because It not ^ vi, n e i-* ^ u ^ t i i ve nyht loida ckss, 1 

divunbH'uate tliL Jtsult-^ em! Ldam ^ tbi. t.L ss o i^iet idenuK in the dutiipetl iilLn.inie 

Ihe ttjidl step IS lo tesuporanK iLpiat^L, ^ used b\ oi> Java RuoUme L nvuonment (JRF) (nok that it could 
be dit>t.rcnt from the one ut>ed by J2SDK) \Mth one that contAtiii my doctored jva 1 --jic! ^ I. .oa tv 
smplementatiosi. Or, vou could use the ~xbootciassDatfi/» option. 

1 iuu ihi. nKts ptod ^ppho^tton agam and voiia i have recovered all my unencrypted and thus easjH 
uei-ompildble , ddinUtons And note I ha\e not used any knowledge of s;^ cryi^t^edcid-s^fLoc-ciei inner 
workmuB to acconipiish this. 

Obier\e th u it i did not x\j.m to nistiumerit a ssstcm cla^s, 1 tould have iii>ed other options such as»a custom 
J\''\lPf agent that hatidies J 7JF:_r''":^^T_CLAs:,_^'i*'5__^'co^ events 

l>essoiis learned 

j, bojK soil Sound this qutck e\<.uisK)n mto k l\ \ so } i\ \ l \^ I i,^ .nU'R >t \u i.upoii int p loi (o realize 
ii, that i,omc tools on the market promise solutions to Ja\a'b eas> re\eit>e engiaccimg problem through class 
encrvption, and you should thmk twice before buying one. Until JYM architecture changes to, sav, support 
class decoding inside native code sou will be bettei off with traditional obfuscatois that peifomi bvte-code 

tninsformauons 

Hicjl, ! inotitu nioic uslIu! skk to sut,h trseks as vveil dehu in i na th >skvul)n ' Ikiu<' ahit to jet a load 
inn (oi 1 > !i,!onn.lassioader could be imakiabie e^fes. xlh it \ou aic ti\ mj^ to tutl- downtht cause >•'£ a 
L I tssloadi,! i^onbltatnt s lolation (more on this in tutuie Java Q& V po»t»i So nuiv be Ja\ a uas born to b*. a 
idijguage toi pure open wuice development aftei all'' Of course, other aichitectures based on piatfoim-neutral 
byte code (such as .Net) are eqtjally prone to reverse engmeermg, I will leave vou with this thought for now. 

About the author 

Madimii Koubtso bis programmed m a vanctv of languages for moic than I ^ veaib iiuluduig Java bmce 
Currentiv he dt\fSopsenteipuse softwajeasa seniot engineer for Inlog> m Austin, lexas 

\n uMJfurts^opMiglit I4)s Jof') ld\a\\oikl iis, {g p A^'vu ) v woiisUcin 
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Java Classloader 

From Wiktpedia. the free encyclopedia 

Ih > Java Ciasstoader is a part of the j;-!', - '^-intims EtWifomnsnt that dynamicaliy l;x=)ds Javj; 
d< <^^e-^ into thp- Jhvs Viitiia: Mach;r:;-- Usually classes are oniy loaded ■'■>r: diri-nsinrj. The Java run 
ttme system does not need to know aboiit files and file systems l>ecause of class loaders. Deieyrd-on is 
an important concept to understand when iearning aboul class loadfiis 

A ^t-ftvvtVi 1 L is a coilection of more or less reiated obj&ct code. In the Java language, libraries are 
typically packaged in Jar fiies. Libraries can contain various, different sorts of objects, the most 
important type of object contained in a Jar file is a Java dass. A class can be thougtit of as a named 
unit of code. The class loader is responsible for locating librades. reading their contents, and loading 
thp tiasbcs contained within tiie libratses This loading is typically done "on demand", m that it does not 
occur untf! the class is aclualiy used Dy the program. A class with a given name can only be loaded 
0!-fce by a given classloader. 
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Class loading process 



Each Java class must be loaded by a class ioader^^l Furthermore, Java programs may make use of 
external libranes (that is, libraries written and provided by someone other than the author of the 
program) or may rtseif be composed, at ieast in part, by a number of libraries. 

Wien the JVM is started, three class loaders are used^^^ s"^^: 

1 . Booti^rap cfass loader 

2. Extensions class loader 

3 System class loader 

Thi' bootstrap class loader loads the core Java libraties^'^^ ( -'^ directory). This dass 

loader, which is parr of the core JVM, ts written m native code. 

The uxtcnsi ns ciasb ioadui loads the code m the extf>tisions diredories ( or any 

other directory s.peci^ieT ny *re system pioperty) it is implemented by thi.' 



The system class ioader loads code found on ; 
variable This fs tmplemented by the - 

User-defined class loaders 



, which maps to the system 
. -I- class. 



By defauit. all user classes are loaded by the defauit system dass loader, but it is posstble to replace it 
by a user-defined >,i m: xsx.. .^.^ (whfch defauits to the onginai root system class loader), and even to 
chain class loaders as destred. 
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Java Classloader - Wikipecii^i tiie free mo/ctop&iai 

TJ-H& makes it possible (for exampfe); 

» to load or unload classes at rur^ttme (for exampfe to load ffbnaries dynamically at runtime, even from 
a HTTP resource). This is an important feature for 
s implementing scripting languages, 
s using bean builders, 
^ aijowing user-defined exten-stbility 
aiiovwng muitipie namespaces to communicate. Tfiis is one of the foundaSons of CORBA / 
protocols, for example. 

^ to change the way the bytscod© is loaded (for example, it Is possible to use encrypted Java class 

s to modify ttie loaded bytecode {for example, for load-time weaving of aspects when using Aspect 
Oriented Programming). 

I Ciass Loaders in J EE M 

Java Platform, Enterprise Editiofi (JEE) application servers tyfscally load classes from a deployed W.AR 
or EAR archive fay a tree of Classloaders. isolating the application froin other applications, but sharing 
classes between deployed modules. So-called "ssfviet containers" are typically implemented in terms of 
ii multiple classloadensf^^^'^^ 

I JAR hell M 

Thfs secbon m»y contain ®i1f l»al ms^aixli or y«tv«trlfl®cl 
«!alms. Please improve tr^e ssiicle by adding references. See the 
talk page for details. (Augu^ 200P} 

JAR hell is a term similar to DLL hell used to describe ail the various ways in which the ciassioading 
process can end up not working. 

s One case is when a developer or deployer of a Java appSication has acddentaily made two different 
versions of a library available to the system. This is not considered an error by the system. Rather, 
the system will load classes from one or the other library. A developer who thinks he has replaced a 
library with a new version, but who has Instead simply added the new library to the list of available 
libraries, may be surprised to see the application still behaving as though the old library is in use, 
which it may well be. 

s Another version of the problem arises when two libraries {or a itbrary and the application) require 
different versions of the same third librafy. If both versions of the third library use the same class 
tiarnes, there is no way to load both versions of the third library with the same classioader, 
s The most complex JAR hell problems arise in circumstances that take advantage of the full 
complexity of the ciassioading system. A Java program is not required to use only a single "flat" 
classioader, but instead may be composed of several (or, in fact, an indefinite number of) nested, 
cooperating classloaders. The interactions between classloaders are too complex to be fully 
described here. It is sufficient to say that classes loaded by different cfassloaders may interact in 
ways which may not be lijlly comprehended by the developer, leading to inexplicable errors or bugs. 
The OSGi Ailiance spedfied (starting as JSR 8 in 1998) a modularity framework that solved JAR hell 
for current and future VM's both in ME, SE, and EE that is widely adopted. Using metadata in the JAR 
manifest, JAR files (called bundles) are wired on a per-package basis. Bundles can export pacicages, 
import packages and keep packages private, providing the basic constmcts of modularity and versioned 
dependency management. 

To remedy the JAR hell problems a Java Community Process ~ JSR 277 was initiated in 2005, The 
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Java Classloaider - Wikipadia, the free encyGiopedfa 



resolution - Java Module Systefn - intended to introduce a new distribution format, modules versioning 
scheme and a common modules repository {simifar in purpose to Microsoft ,NET's Global Assembly 
Cache). In December 200S Sun announced that JSR 277 was put on hold ''■-'l 



See also 



[edit] 
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